Windows Audio Service Keeps Stopping with Error 0x80070005 (Access Denied) on Windows 11 26H2

อัยการ ส่งศิลป์วัฒน์ 0 Reputation points
2026-11-04T23:55:55.92+00:00

I'm experiencing a serious audio issue on my Windows 11 PC, and I would appreciate your help.

System Information:

  • OS: Windows 11 Version 26H2

OS Build: 26300.9818

Recent update: KB5127936 (2026-10 Preview Update)

Headset: HyperX Cloud III (wired USB-C connected through a USB-A adapter)

Problem:

The problem started on November 4, 2026. My headset suddenly stopped producing sound. When I open Sound Settings or mmsys.cpl, the Playback tab shows no audio devices.

Device Manager reports that the audio device is working properly, but Windows cannot detect any playback devices.

Troubleshooting I have already tried:

Uninstalled the KB5127936 preview update and restarted the PC, but the problem remained.

Checked Windows Audio and Windows Audio Endpoint Builder services.

Windows Audio Endpoint Builder is running, but Windows Audio (Audiosrv) keeps stopping.

Attempted to start Windows Audio manually, but it fails with error 0x80070005 (Access Denied).

Checked the service dependencies. RPC and Windows Audio Endpoint Builder are listed.

Checked the Windows Audio service account, which is set to NT AUTHORITY\LocalService.

Ran DISM and SFC. DISM completed successfully, and SFC reported no integrity violations.

Checked the permissions and existence of Audiosrv.dll and es.dll. Both files exist, and their permissions appear normal.

Checked the EventSystem service. It also keeps returning to the STOPPED state after attempting to start it.

Checked the EventSystem ServiceDll registry value, which is set to %systemroot%\system32\es.dll.

Event Viewer Error:

Event ID: 7023 Source: Service Control Manager

Message: "The Windows Audio service terminated with the following error: General access denied error."

I have tried several troubleshooting steps, but the issue still persists.

My questions:

What could cause both Windows Audio and EventSystem to fail to start?

Why does Windows Audio return error 0x80070005 even though the service account and DLL file permissions appear normal?

Could this be a Windows 11 26H2 issue related to the KB5127936 update?

Is there a way to repair the Windows services without performing a clean installation?

Would an in-place repair installation fix this issue while keeping my personal files and installed applications?

I would appreciate any guidance or advanced troubleshooting steps. Thank you.I'm experiencing a serious audio issue on my Windows 11 PC, and I would appreciate your help.

System Information:

OS: Windows 11 Version 26H2

OS Build: 26300.9818

Recent update: KB5127936 (2026-10 Preview Update)

Headset: HyperX Cloud III (wired USB-C connected through a USB-A adapter)

Problem:

The problem started on November 4, 2026. My headset suddenly stopped producing sound. When I open Sound Settings or mmsys.cpl, the Playback tab shows no audio devices.

Device Manager reports that the audio device is working properly, but Windows cannot detect any playback devices.

Troubleshooting I have already tried:

Uninstalled the KB5127936 preview update and restarted the PC, but the problem remained.

Checked Windows Audio and Windows Audio Endpoint Builder services.

Windows Audio Endpoint Builder is running, but Windows Audio (Audiosrv) keeps stopping.

Attempted to start Windows Audio manually, but it fails with error 0x80070005 (Access Denied).

Checked the service dependencies. RPC and Windows Audio Endpoint Builder are listed.

Checked the Windows Audio service account, which is set to NT AUTHORITY\LocalService.

Ran DISM and SFC. DISM completed successfully, and SFC reported no integrity violations.

Checked the permissions and existence of Audiosrv.dll and es.dll. Both files exist, and their permissions appear normal.

Checked the EventSystem service. It also keeps returning to the STOPPED state after attempting to start it.

Checked the EventSystem ServiceDll registry value, which is set to %systemroot%\system32\es.dll.

Event Viewer Error:

Event ID: 7023
Source: Service Control Manager

Message:
"The Windows Audio service terminated with the following error: General access denied error."

I have tried several troubleshooting steps, but the issue still persists.

My questions:

What could cause both Windows Audio and EventSystem to fail to start?

Why does Windows Audio return error 0x80070005 even though the service account and DLL file permissions appear normal?

Could this be a Windows 11 26H2 issue related to the KB5127936 update?

Is there a way to repair the Windows services without performing a clean installation?

Would an in-place repair installation fix this issue while keeping my personal files and installed applications?

I would appreciate any guidance or advanced troubleshooting steps. Thank you. (P.S. I use ChatGPT to write this)

Windows for home | Windows 11 | Performance and system failures

3 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Ferdinand Nanalig 33,820 Reputation points Independent Advisor
    2026-11-05T03:26:29.2233333+00:00

    Hi, let me help you.

    Have you tried updating the audio driver from your laptop's support website?

    Was this answer helpful?

  2. AI answer

    2026-11-06T14:18:35+00:00

    Use Fix problems using Windows Update to reinstall the current Windows 11 build and repair Windows components while preserving installed applications, personal files, and settings.

    Repair Windows without a clean installation

    Because Audiosrv and the separate COM+ Event System service both fail, while DISM and SFC report no corruption, this is broader than a missing headset endpoint or damaged Audiosrv.dll. A repair reinstall is the appropriate next nondestructive step:

    1. Back up important data and record the BitLocker recovery key, if device encryption is enabled.
    2. Keep the computer connected to power and the internet.
    3. Open Settings → System → Recovery.
    4. Under Fix problems using Windows Update, select Reinstall now.
    5. Approve the restart option and select OK.
    6. Let Windows download and reinstall the repair version, then restart.
    7. After sign-in, check:
      • services.msc → COM+ Event System
      • services.msc → Windows Audio
      • mmsys.cpl → Playback

    This reinstalls the same Windows version, repairs system files and components, and preserves apps, files, and settings.^1^

    If Reinstall now is unavailable—commonly on devices whose updates are managed by an organization—perform an in-place upgrade from matching Windows installation media instead:

    1. Create Windows installation media matching the installed edition, language, and architecture.
    2. Sign in normally and connect the media.
    3. Open the drive in File Explorer and run setup.exe from inside Windows. Do not boot from the USB.
    4. Select Change what to keep.
    5. Select Keep personal files and apps.
    6. Select Install.

    That option explicitly retains personal data, applications, and settings.^2^

    What the access-denied error indicates

    0x80070005 means that an operation performed during service initialization was denied. Normal permissions on Audiosrv.dll and es.dll therefore do not eliminate permission-related causes. The denied object could instead be:

    • another file or directory;
    • a registry key;
    • a service security descriptor;
    • a COM/DCOM resource;
    • a resource locked or filtered by security software.

    Service startup involves the Service Control Manager starting the host process and waiting for the service to initialize. A failure inside that initialization can be returned as the service-start error even though the service account and primary DLL are correct.^3^

    Do not apply broad registry, DCOM, or filesystem permission resets without identifying the denied object. Incorrect ACL changes can weaken security or create additional failures.

    Identify the denied object before changing permissions

    If a root cause is required before performing the repair, capture the failure with Process Monitor:

    1. Run Microsoft Sysinternals Process Monitor as administrator.
    2. Press Ctrl+E to stop capture and clear existing events.
    3. Add filters:
      • Result is ACCESS DENIED → Include
      • optionally Process Name is svchost.exe → Include
    4. Start capture with Ctrl+E.
    5. In an elevated terminal, reproduce the failure:
    sc query EventSystem
sc start EventSystem
sc query Audiosrv
sc start Audiosrv
    1. Stop capture immediately.
    2. Examine access-denied operations at the exact service-start timestamps. Check the Path, Operation, Process, Detail, and Stack fields.
    3. Correct only an object whose denied access is directly associated with the failed initialization.

    Microsoft’s Process Monitor guidance recommends elevated capture and filtering for Access Denied, while warning that not every denied operation is an actual failure—requests for excessive access are often rejected normally.^4^

    Also export Event Viewer → Applications and Services Logs → Microsoft → Windows → Audio → Operational around the failure timestamp.^5^

    Is KB5127936 responsible?

    KB5127936 is the October 28, 2026 preview update corresponding to Windows 11 26H2 build 26300.9818.^6^

    Microsoft’s 26H2 release-health page does not list KB5127936 as causing Audiosrv or COM+ Event System failures with 0x80070005.^7^ A documented USB Audio Class 1.0 problem can produce no output or unavailable Sound settings, but it is associated with the September update and commonly includes a Device Manager Code 10. Your device reports as working, and that issue does not account for both Audiosrv and EventSystem failing.^8^

    Uninstalling KB5127936 without changing the symptom further weakens—but does not conclusively disprove—a connection. If the repair reinstall fails, preserve the Process Monitor trace and exported event logs and open a Microsoft support case rather than applying guessed service or registry ACLs.

    References

    1. Fix issues by reinstalling the current version of Windows | Microsoft Support
    2. Reinstall Windows with the installation media | Microsoft Support
    3. Service Startup
    4. Troubleshoot Apps failing to start using Process Monitor
    5. How to collect Windows audio event logs
    6. October 28, 2026 — KB5127936 (OS Builds 26300.9818 and 26200.9818) Preview
    7. Windows 11, version 26H2 known issues and notifications
    8. October 13, 2026—KB5127648 (OS Builds 26300.9711, 26200.9711 and 26100.9711) | Microsoft Support
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  3. Ferdinand Nanalig 33,820 Reputation points Independent Advisor
    2026-11-06T18:47:04.01+00:00

    Please try these steps;

    Open Services (press Win+R, type services.msc, and hit Enter), then find Windows Audio in the list and double-click it. In the Windows Audio Properties window, go to the Log On tab, select Local System account, and check “Allow service to interact with desktop.” Click Apply, then OK, and restart the Windows Audio service so the change takes effect.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.